CLAIMS 



What is claimed is: 

1 . A method for creating a secure script, comprising: 

a) generating a hashed value for at least one executable command in the script; 

b) signing the hashed value to create a signed hashed value; and 

c) appending the signed hashed value to the script. 

2. The methoa of claim 1, wherein generating a hashed value for at least one executable 
command in the script comprises providing the executable command as a key value that is input 
to a mathematical function, computing the mathematical function, and providing as output from 
the mathematical\function the hashed value. 

3. The method of claim 1, wherein signing the hashed value to create a signed hashed value 
comprises encrypting the hashed value. 

4. The method of claim 3, wherein encrypting the hashed value comprises encrypting the hashed 
value using a cryptographic key. 

5. The method of claim 4,\wherein encrypting the hashed value using a cryptographic key 
comprises encrypting the hashed value using a public encryption private key. 
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6. The method of claim 5, wherein the script is component in a World Wide Web document 
downloaded from a HyperText Transfer Protocol server to a client for execution thereon. 



7. The method of claim 1, further comprising encrypting the script, including the signed hashed 
value appended to the script to create an encrypted script. 

8. The method of claim 17, wherein encrypting the script comprises encrypting the script using a 
symmetric encryption key: 



9. A method for securing la script, comprising: 



a) computing a hashed va 

b) encrypting the hashed \ 

c) appending to the script 



ue for each executable command in a script; 
alue for each executable command in the script; and 
ihe encrypted hashed values for each executable command. 



10. The method of claim 9 
in the script comprises 
encryption private key. 



wherein encrypting the hashed value for each executable command 
encrjypting the hashed value for each executable command with a public 



1 1 . The method of claim 10 
and a public key correspond 



further comprising signing a control program, comprising the script 
ng to the private key, to keep hidden the public key. 



12. The method of claim 1 1, wherein signing the control program comprises encrypting the 
control program using a second public encryption private key. 
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13. The method of claim 12, wherein the control program is an ActiveX control in an application 
program. \ 

14. The method of claim 13, wherein the ActiveX control is in a HyperText Markup Language 
(HTML) document. 

15. The method of claim 14, wherein the HTML document is downloaded from a HyperText 
Transfer Protocol (HTTP) server to a HTTP client. 

16. A method for executing a script, comprising: 

a) computing a hashed value for each executable command in a script; 

b) decrypting an encryp tea hashed value appended to the script for each executable command in 
the script to obtain a decrypted hashed value for each executable command in the script; 

c) comparing the computed hashed value for each executable command in the script with the 
corresponding decrypted hashed value for each executable command in the script; and 

d) executing the executable commands in the script if the computed hashed values for the 
executable commands in the script are the same as the corresponding decrypted hashed values 
appended to the script for the executable commands. 

17. The method of claim 16, wherein the script is an encrypted script, further comprising 
decrypting the encrypted script witma symmetric encryption key to obtain the script. 
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18. The method of claim 16, first comprising verifying a public key cryptography signature 
associated with a control program comprising the script. 

19. The method of claim 16, further comprising repeating a and c each execution of the 
executable commands in the script to prevent dynamic modification to the script. 

20. The method of claim u 6, wherein the script is in a HyperText Markup Language (HTML) 
document. \ 

21. The method of claim 20, wherein the HTML document is downloaded to a Hypertext 
Transfer Protocol (HTTP) client from a HTTP server. 

22. The method of claim 21 performed by an ActiveX control in the HTML document. 

23. An article of manufacture comprising a machine accessible medium providing a plurality of 
machine readable instructions, Iwherein the instructions, when executed by a processor, cause the 
processor to: 1 

a) compute a hashed value for e^ch executable command in a script; 

b) encrypt the hashed value for e^ch executable command in the script; and 

c) append to the script the encrypted hashed values for each executable command. 
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24. An article of nLnufacture comprising a machine accessible medium providing a plurality of 
machine readable instructions, wherein the instructions, when executed by a processor, cause the 
processor to: ^ 

a) compute a hashed vlalue for each executable command in a script; 



b) decrypt an encrypted^hashed value appended to the script for each executable command in the 
script to obtain a decrypted hashed value for each executable command in the script; 

c) compare the computecnhashed value for each executable command in the script with the 
corresponding decrypted hashed value for each executable command in the script; and 

d) execute the executable commands in the script if the computed hashed values for the 
executable commands in the script are the same as the corresponding decrypted hashed values 
appended to the script for the executable commands. 

25. An apparatus, comprising 

means for computing a hashed ^alue for each executable command in a script; 
means for encrypting the hashed value for each executable command in the script; and 
means for appending to the script the encrypted hashed values for each executable command. 

26. An apparatus, comprising: 

means for computing a hashed valike for each executable command in a script; 
means for decrypting an encrypted hashed value appended to the script for each executable 
command in the script to obtain a decrypted hashed value for each executable command in the 
script; 
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means for comparing the computed hashed value for each executable command in the script with 
the corresponding decrypted hashed value for each executable command in the script; and 
means for executing tha executable commands in the script if the computed hashed values for the 
executable commands in pe script are the same as the corresponding decrypted hashed values 
appended to the script for the executable commands. 
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